Lussumo Vanilla vulnerabilities

• lussumo vanilla Multiple PHP remote file inclusion vulnerabilities in definitions.php in Lussumo Vanilla 1.1.10,... CVE-2010-1337 Public exploit 7.5 HighApril 9, 2010
• lussumo vanilla Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1... CVE-2009-1845 Public exploit 4.3 MediumJune 1, 2009
• lussumo vanilla Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and... CVE-2008-3874 3.5 LowAugust 29, 2008
• lussumo vanilla Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier... CVE-2008-3760 4.3 MediumAugust 21, 2008
• lussumo vanilla Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and... CVE-2008-3759 7.5 HighAugust 21, 2008
• lussumo vanilla Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1)... CVE-2008-3758 Public exploit 4.3 MediumAugust 21, 2008
• lussumo vanilla Lussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories... CVE-2007-5644 Public exploit 7.5 HighOctober 23, 2007
• lussumo vanilla Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote... CVE-2007-5643 Public exploit 7.5 HighOctober 23, 2007
• lussumo vanilla ** DISPUTED ** PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and... CVE-2006-3850 Public exploitDisputed 5.1 MediumJuly 25, 2006